search

emanuele-f / PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android
https://emanuele-f.github.io/PCAPdroid
GNU General Public License v3.0
2.28k stars 273 forks source link

tcp packet length larger than mtu 1500 #404

Closed hjhsggy closed 7 months ago

hjhsggy commented 7 months ago

image

emanuele-f commented 7 months ago

This is normal for PCAPdroid in VPN mode, due to the way it processes traffic but it's also common in general, when capturing packets on hosts, see https://osqa-ask.wireshark.org/questions/24699/tcp-packet-length-was-much-greater-than-mtu . If you want to capture the real packets, you will need to capture them with a bump in the wire, e.g. between your hosts and the router

hjhsggy commented 7 months ago

This is normal for PCAPdroid in VPN mode, due to the way it processes traffic but it's also common in general, when capturing packets on hosts, see https://osqa-ask.wireshark.org/questions/24699/tcp-packet-length-was-much-greater-than-mtu . If you want to capture the real packets, you will need to capture them with a bump in the wire, e.g. between your hosts and the router

thanks